PA-3400 Series Firewall Overview
Item
Component
Descripon
1
Ethernet ports 1 through 12
Twelve RJ-45 1Gbps/2.5Gbps/5Gbps/10Gbps ports
for network traffic. The link speed and link duplex
are auto-negoate only.
2
SFP ports 13 through 22
Ports 13 through 22 are SFP (1Gbps) or SFP+
(10Gbps) based on the installed transceiver.
The SFP ports can be remapped as
HA-1 ports via PAN-OS or Panorama.
These remapped HA-1 ports offer high
availability connecvity over a longer
distance than what is permied by the
HA1-A and HA1-B ports listed below.
3
zSFP+ ports 23 through 26
Four SFP28 (25Gbps) ports that also support 1G
SFP and 10G SFP+ modules.
4
zQSFP+ ports 27 through 36
Two form-factor pluggable (QSFP+/QSFP28)
40Gbps/100Gbps Ethernet ports.
5
HSCI port
One SFP+ (10Gbps) port (supports only an SFP+
transceiver or passive SFP+ cable).
Use this port to connect two PA-3400 Series
firewalls in a high availability (HA) configuraon as
follows:
• In an acve/passive configuraon, this port is for
HA2 (data link).
• In an acve/acve configuraon, you can
configure this port for HA2 and HA3. HA3 is
used for packet forwarding for asymmetrically
routed sessions that require Layer 7 inspecon
for App-ID and Content-ID.
PA-3400 Series Next-Gen Firewall Hardware Reference
17
©
2022 Palo Alto Networks, Inc.